CVE-2022-38402 Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...

CVE-2022-38403 Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...

CVE-2022-38403

CVE-2022-38403 affects Adobe InCopy 17.3 and earlier, and 16.4.2 and earlier. The vulnerability is a heap-based buffer overflow in InCopy (SVG parsing) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a maliciou...

CVE-2022-38411 Adobe Animate SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Animate version 21.0.11 and earlier and 22.0.7 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-38411

Adobe Animate versions 21.0.11 and earlier, and 22.0.7 and earlier, are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Remediation per APSB22-54 is to update to 21.0.12...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5613-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5613-1 advisory. It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands. An attacker could...

Adobe InDesign Multiple Vulnerabilities (APSB22-50) - Mac OS X

Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...

Adobe Bridge Multiple Vulnerabilities (APSB22-49) - Mac OS X

Adobe Bridge is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if descriptio...

Adobe InDesign Multiple Vulnerabilities (APSB22-50) - Windows

Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...

RHEL 8 : compat-exiv2-026 (RHSA-2021:3230)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3230 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract...

Adobe Bridge Multiple Vulnerabilities (APSB22-49) - Windows

Adobe Bridge is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if descriptio...

Heap-based Buffer Overflow in function utfc_ptr2len

Description Heap-based Buffer Overflow in function utfcptr2len at vim/src/mbyte.c:2125. vim version git log commit 470a14140bc06f1653edf26ab0b3c9b801080353 grafted, HEAD - master, tag: v9.0.0461, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

LIEF vulnerable to heap based buffer overflow via print_binary function

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function printbinary at /c/machoreader.c. Commit 0033b6312fd311b2e45e379c04a83d77c1e58578 contains a patch...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2336)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

EulerOS 2.0 SP9 : libjpeg-turbo (EulerOS-SA-2022-2296)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based...

Adobe Bridge 11.x < 11.1.4 / 12.x < 12.0.3 Multiple Vulnerabilities (APSB22-49)

The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.4 or 12.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-49 advisory. - Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Heap-based Buffer...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2307)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PCX...

EulerOS 2.0 SP9 : libjpeg-turbo (EulerOS-SA-2022-2325)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...